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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
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- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 

Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 
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Status 

1 Responsive to communication(s) filed on 21 March 2007 . 

2a)S This action is FINAL. 2b)D This action is non-final. 

3)L] Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 
closed in accordance with the practice under Ex parte Quayle, 1935 C.D. 11, 453 O.G. 213. 
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4® Claim(s) 7-29 is/are pending in the application. 
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5)D Claim(s) is/are allowed. 

6® Claim(s) 7-29 is/are rejected. 

7) 0 Claim(s) is/are objected to. 

8) 0 Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10)0 The drawing(s) filed on is/are: a)0 accepted or b)0 objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
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application from the International Bureau (PCT Rule 17.2(a)). 
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DETAILED ACTION 

1 . This is in response to the arguments filed on 03/21/2007. 

2. Claims 1-29 are pending in the application. 

3. Claims 1-29 have been rejected. 



Response to Amendment 

4. The examiner approves the amendments made to claim 1,13, and 24. 

Response to Arguments 

5. Applicant's arguments with respect to claims 1-29 have been considered but are 
moot in view of the new ground(s) of rejection. 



Claim Rejections - 35 USC §103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 



6. Claims 1-29 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Robert C. Houvener hereinafter Houvener (U.S. Patent No. 6424249) in view of Laing et 
al hereafter Laing (US patent 5534857). 
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7. As per claims 1 , Houvener discloses a method comprising the steps of: sending 
an initial signal by the first device to establish a wireless communication with the second 
device, the first device including only a data capturing arrangement ("DCA") as an input 
device interface with a user thereof; initiating an authentication process by the second 
device (col. 3, lines 3-25, and col. 5, lines 34-57); obtaining the a PIN code from the 
user via the DCA, the PIN code being obtained by the DCA from indicia on the second 
device; performing a pairing process to compare the PIN code to entries in a database 
of authorized PIN codes; when the pairing process has been successfully completed 
(col. 3, lines 3-25, and col. 5, lines 34^57). He does not expressly disclose generating a 
link key to establish the authenticated communication between the first and second 
devices. However, in the same field of endeavor, Laing discloses generating a link key 
to establish the authenticated communication between the first and second devices 
(abstract, col. 1, lines 50-67). 

Accordingly, it would been obvious to one of ordinary skill in the network security art at 
the time of invention was made to have incorporated Laing’s teachings of method and 
system for secure, decentralized personalization of smart cards with the teachings of 
Houvener, for the purpose of suitably generating a key for a specific link to perform a 
authenticated communication (col. 2-3). 

8. As per claims 2-3, Houvener discloses the method wherein the databases is 
stored in a memory arrangement of the second device, wherein the first device is a 
mobile barcode scanner (col. 3, lines 3-25, and col. 5, lines 34-57). 
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9. As per claims 4-5, Houvener discloses the method wherein the first device 
communicates with the second device using Bluetooth technology, wherein the 
obtaining step further includes the following substeps: scanning a barcode using the 
DCA, the barcode being provided by the user as the PIN code, and converting the 
barcode into the PIN code using a processor of the first device (col. 7, lines 30-54). 

10. As per claims 6-7, Houvener discloses the method wherein the second device 
includes a wireless access point which communicates with the first device, wherein the 
first device includes an alerting arrangement notifying the user when to enter the PIN 
code (col. 7, lines 30-54). 

11. As per claims 8-9, Houvener discloses the method wherein the alerting 
arrangement includes at least one of a speaker emitting a predetermined sound and a 
set of LEDs emitting a predetermined lighting pattern, wherein the obtaining step 
includes the following substeps: limiting a time period for the user to enter the PIN code 
to a predetermined time period, and refusing to accept the PIN code from the user when 
the predetermined time period has expired (col. 3, lines 3-25, and col. 5, lines 34-57). 

12. As per claims 10, Houvener discloses the method wherein the pairing process 
includes the following substeps: providing first sample data by the second device to the 
first device, generating second data, by the first device, as a function of the first sample 
data, the PIN code and a hashing procedure; providing at least a portion of the second 
data to the second device, generating third data by the second device as a function of 
one of the authorized PIN codes stored in the database, the second data and the 
hashing procedure; comparing the second data to the corresponding third data by the 
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second device, and when the second data matches to the third data, generating an 
indication the pairing process is successfully completed (col. 7, lines 30-54). 

1 3. As per claims 11-12, Houvener does not disclose the method wherein the link 
key is one of a temporary key which is effective only for a single session and a long- 
term key which is effective for multiple sessions between the first and second devices, 
establishing a secure communication between the first and second devices using a 
predetermined encryption technology. However, Laing discloses wherein the link key is 
one of a temporary key which is effective only for a single session and a long-term key 
which is effective for multiple sessions between the first and second devices, 
establishing a secure communication between the first and second devices using a 
predetermined encryption technology (abstract, col. 1 , lines 50-67). 

The same motivation that was utilized in the combination of claim 1 applies equally as 
well to claim 11-12. 

1 4. As per claims 1 3, Houvener discloses a system comprising: a first wireless 
mobile device including only a data capturing arrangement ("DCA") as an input device 
interface with a user thereof; and a second device receiving an initial signal from the 
first device to establish a wireless communication, the second device initiating an 
authentication process, wherein the first device obtains a PIN code from the user via the 
DCA, the PIN code being obtained by the DCA from indicia on the second device., 
wherein the first and second devices perform a pairing process to compare the PIN 
code to entries in a database of authorized PIN codes (col. 3, lines 3-25, and col. 5, 
lines 34-57). He does not expressly disclose the first and second devices generate a 
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link key to establish the authenticated wireless communication. However, in the same 
field of endeavor, Laing discloses the first and second devices generate a link key to 
establish the authenticated wireless communication (abstract, col. 1 , lines 50-67). 

The same motivation that was utilized in the combination of claim 1 applies equally as 
well to claim 13: 

1 5. Claims 1 4-23 are listed all the same elements of claim 2-12 but in system form 
rather than the method form. Therefore, the supporting rationales of the rejection to 
claim 2-12 apply equally as well to claim 14-23. 

16. As per claims 24, Houvener discloses a wireless mobile device comprising: a 
processor: a wireless communication arrangement: and a data capturing arrangement 
("DCA') being the only input device interface for a user thereof, wherein the processor 
generates a request for establishing an authenticated wireless communication, the 
request being forwarded to the further device via the communication arrangement, the 
communication arrangement receives from the further device first data and a request for 
second data, the DCA obtaining the PIN code from the user, the PIN code being 
obtained by the DCA from indicia on the further device, the processor generating the 
second data as a function of the PIN code, the first data and the hashing procedure, the 
second data being provided to the further device, wherein the further device generates 
third data as a function of one of the authorized PIN codes stored in a database, the 
second data and the hashing procedure, and wherein, when the second data matched 
to the third data (col. 3, lines 3-25, and col. 5, lines 34-57). He does not expressly 
disclose the device generate a link key to establish the authenticated wireless 
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communication. However, in the same field of endeavor, Laing discloses the device 
generate a link key to establish the authenticated wireless communication (abstract, col. 
1 , lines 50-67). 

The same motivation that was utilized in the combination of claim 1 applies equally as 
well to claim 24. 

1 7. Claims 25-29 are listed all the same elements of claims 3-8 but in device form 
rather than the method form. Therefore, the supporting rationales of the rejection to 
claim 2-12 apply equally as well to claim 14-23. 



Conclusion 

18. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
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the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Mohammad w. Reza whose telephone number is 571- 

272- 6590. The examiner can normally be reached on M-F (9:00-5:00). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner’s 
supervisor, MOAZZAMI NASSER G can be reached on (571)272-4195. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 

273- 8300. 



Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 

Mohammad Wasim Reza 
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SUPERVISORY PATENT EXAMINER 
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